CVE-2026-70025
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
Risk Assessment
An attacker could crash the Netlogon service, potentially leading to network disruption.
Recommendation
Apply Windows security updates and monitor the Netlogon service.
Other vulnerabilities in Windows Netlogon
See all- CVE-2026-72982Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-41089Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
- CVE-2026-70090Medium
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
- CVE-2026-70072Medium
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVE-2026-62759High
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
- CVE-2026-50500High
A Use-After-Free vulnerability in Windows Netlogon allows an authorized attacker to remotely elevate privileges over a network. The issue stems from improper memory management during authentication request processing.
Original NVD description (English source)
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

